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Abstract 


In air traffic management, the aircraft separation requirement is defined by a mini- 
mum horizontal distance and a minimum vertical distance that the aircraft have to 
maintain. Since this requirement defines a cylinder around each aircraft rather than 
a sphere, the three-dimensional Euclidean distance does not provide an appropriate 
basis for the definition of time of closest approach. For instance, conflicting aircraft 
are not necessarily in loss of separation at the time of closest three-dimensional Eu- 
clidean distance. This paper proposes a definition of time of closest approach that 
characterizes conflicts in a three-dimensional airspace. The proposed time is defined 
as the time that minimizes a distance metric called cylindrical norm. An algorithm 
that computes the time of closest approach between two aircraft is provided and the 
formal verification of its main properties is reported. 
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1 Introduction 


In a three-dimensional airspace, the separation requirement for two aircraft is spec- 
ified as a minimum horizontal separation, which is typically 5 nautical miles, and 
a minimum vertical separation, which is typically 1000 feet. This requirement is 
graphically illustrated by a cylinder, called the protected zone, surrounding each 
aircraft. A loss of separation between two aircraft is an overlapping of the aircraft’s 
protected zones. A conflict is a predicted loss of separation within a lookahead time 
interval, which is typically a few minutes long. 

A natural question in the context of state-based separation assurance systems 
is, “What is the time of closest approach between two aircraft?” In a 2-dinrensional 
airspace, the answer to this question is clear: the time of closest horizontal approach 
between two aircraft is the time when the Euclidean horizontal distance between the 
aircraft is minimal. The time of closest horizontal approach characterizes horizontal 
conflicts in the sense that two aircraft are in horizontal conflict if and only if they 
are in horizontal loss of separation at this time. 

In a 3-dimensional airspace, the protected zone is a cylinder rather than a sphere. 
Typically, this cylinder is 30 times wider than high. Thus, the three-dimensional 
Euclidean distance does not properly reflect whether the aircraft are separated or 
not. For instance, vertical separation of one thousand feet may be safe, but horizon- 
tal separation of one thousand feet is not. Thus, in contrast to the 2-dinrensional 
case, the time that minimizes the 3-dimensional Euclidean distance does not provide 
an appropriate definition for the time of closest approach between the aircraft. 

The problem addressed by this paper is the mathematical and algorithmic defi- 
nition of a time of closest approach between two aircraft in a 3-dinrensional airspace. 
This time is defined as the time that minimizes a distance metric called cylindrical 
norm. As indicated by its name, the cylindrical norm accommodates the notion 
of aircraft distance to the fact that the protected zone is a cylinder. The rest of 
this paper is organized as follows. Section 2 explains the mathematical notation 
used in this paper. Section 3 reviews the definition of the time of closest hori- 
zontal approach. Section 4 proposes a definition of time of closest approach for a 
3-dinrensional airspace and states its main property, i.e. , that the proposed time of 
closest approach correctly characterizes 3-dinrensional conflicts. Section 5 summa- 
rizes this work and presents concluding remarks. 


2 Mathematical Notation 

The mathematical development presented in this paper has been fully formalized in 
the Prototype Verification System (PVS) [6]. PVS is a mechanical theorem prover 
that consists of an expressive specification language based on higher-order logic and a 
proof checker for this logic. 1 For readability, this paper uses standard mathematical 
notation instead of PVS syntax. 


1 PVS is electronically available from http://pvs.csl.sri.com. The development presented in 
this paper is electronically avaialable from http://shemesh.larc.nasa.gov/people/cain/ACCoRD. 


The constructions in this paper consider an airspace with two distinguished air- 
craft, the ownship and the intruder , that are potentially in conflict. The state of 
an aircraft consists of its current position and velocity information, and it is repre- 
sented by vectors in a Euclidean geometry. In a 2-dinrensional airspace, the separa- 
tion requirement is defined by minimum horizontal distance D. In a 3-dinrensional 
airspace, the separation requirement is defined by a minimum horizontal distance 
D and a minimum vertical distance H. The values D and H are considered to be 
parametric constants. 

The symbols M, M 2 , and R 3 represent the sets of real numbers, the set of 2- 
dimensional vectors, and the set of 3-dinrensional vectors, respectively. Vector vari- 
ables are written in boldface and can be denoted by their components. For example, 
if w 6 K 3 and u G M 2 , then w = (w x ,w y ,w z ) and u = (u x ,u y ). The expression 
w (x, y ) denotes the projection of w in the horizontal plane, i.e., 2 

W(X, 1 /) = O x ,w y ). 

The notation ||w|| refers to the Euclidean norm of the vector w and the notation 
w-w ; refers to the dot product of the vectors w and wh The expression 0 represents 
the zero vector, i.e., the vector whose components are 0. 

Aircraft trajectories are represented by a point moving at constant linear speed, 
i.e., if the current state of an aircraft is given by the position s and velocity vector 
v, its predicted position at time t is s + tv. In this paper, the position vector s G and 
the velocity vector v Q represent the current state of the ownship. Similarly, s; and 
Vj represent the current position and velocity vectors of the intruder aircraft. As it 
simplifies the mathematical development, the formalization presented here usually 
considers a relative view where the intruder is fixed at the origin of the coordinate 
system. In this paper, the vectors s and v will commonly be used to denote the 
relative position s G — s * and the relative velocity v 0 — v*, respectively. 

Aircraft predicted trajectories are considered valid for a lookahead time interval , 
which is specified by a lower bound B and an upper bound T. The notation [B,T], 
where 0 < B < T, represents the interval of real numbers greater than or equal to 
B and less than or equal to T, i.e., 

[B, T] = {x G M | B < x < T}. 

The values B and T are parametric constants. The upper bound T is usually a 
real number. However, the formalism presented here also considers the special case 
where T has an infinite value, i.e., T = oo. In that case, it is assumed that for 
all x G M, x < oo and min(x, oo) = x. It is remarked that this abuse of notation 
is a syntactical convenience and should not be understood as an extension of real 
arithmetic with infinite values. For instance, the value oo is not considered to be 
in M. Hence, if T = oo, the expression [B,T] simply represents the interval of real 
numbers greater than or equal to B. Furthermore, particular care is taken in this 
paper to avoid the use of oo in arithmetic expressions other than min(x, oo) and 
relational operations such as x < oo. 

2 The symbol = is used in this paper to introduce mathematical definitions. 
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Finally, by convention, names of predicates and functions used in the specifica- 
tion of the problem are written in italics. Functions that represent algorithms to be 
implemented in a programming language are written in typewriter font. 

3 Time of Closest Horizontal Approach 

The horizontal separation requirement can be understood as an imaginary circle of 
diameter D around each aircraft and a horizontal conflict between two aircraft as a 
future overlapping of these circles. In this paper, an alternative but equivalent view 
is considered where the intruder is surrounded by a circle, called protected zone, of 
radius D. From this perspective, a horizontal conflict between these two aircraft is 
equivalent to the existence of a time within a lookahead time interval at which the 
ownship is in the interior of the intruder’s protected zone. 

3.1 Horizontal Conflict 

Given a lookahead time interval [B,T\, where T is possibly infinite, a horizontal 
conflict between the ownship and the intruder aircraft occurs when there is a time 
t £ [B,T] such that the horizontal distance between the aircraft is less than D, i.e., 

||(s 0 + fv 0 ) - (s* + tvj)|| < D, 

where s 0 ,v 0 ,Sj, and are all in M 2 . Since (s G + fv D ) — (s* + tv*) = (s G — Sj) + 
t (v 0 — Vj), the predicate that characterizes horizontal conflict can be defined in 
terms of the relative vectors s = s G — s* and v = v Q — v,, i.e., the relative position 
and velocity vectors, respectively, of the ownship with respect to the intruder. The 
predicate HorizontalConflict? \b,t\i parametric on the lookahead time interval [B, T ], 
is formally defined as follows. 

HorizontalConflict?^ BT ^[ s,v) = 3t £ [B,T\ : ||s + fv|| < D. (1) 

3.2 Time of Closest Horizontal Approach 

This section presents a mathematical derivation of the time of closest horizontal 
approach between two aircraft for a given lookahead time interval. 

Definition 1. The time of closest horizontal approach between the ownship and the 
intruder aircraft, for a lookahead time interval [B,T\, where T is possibly infinite, 
is the minimum time r in the interval [ B,T \ that satisfies 

Vi £ [B, T] : ||s + t v|| > ||s + rv||, (2) 

where s = s 0 — s and v = v Q — Vj . 

From the definition above, it is not clear that such time r exists. The rest of 
this section provides an algorithm definition of time of closest horizontal approach 
and the proof that it satisfies Definition 1. 
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The norm ||s+tv|| is minimized precisely when its square \\s+t v 1 1 2 is minimized. 
This squared norm is equal to ||v|| 2 i 2 + (2 s • v) t + ||s|| 2 , which is a quadratic 
polynomial in the variable t. For any quadratic polynomial of the form a i 2 + b t + c 
where a > 0, the minimum occurs at the point t = — Thus, if v 0, then the 
minimum of the norm I Is + t vll is attained at time — AAr. If that time is less than 

II II || v| | - 

B, then every t > B satisfies ||s + f v|| > ||s + B v||. Furthermore, if that time is 
greater than T, then every time t < T satisfies ||s + t v|| > ||s + T v||. If v = 0, 
the distance between the aircraft remains constant. In that case, the minimum time 
that satisfies Formula (6) is B. 

This motivates the definition of the function tcha^ yj that computes the time 
of closest horizontal approach for the lookahead time interval [B,T\. 


tcha [S)T] (s,v) 


min (t, max (b, - if v / 0, 

B otherwise. 


(3) 


It has been proved in PVS, using basic algebra, that the time tcha[ B , t]( s , v) satisfies 
Definition 1. 


Lemma 1. For any t 6 [B,T], ||s + t v|| > |js + rv||, where r = tcat B T]{s, v). 

The next theorem follows immediately. 

Theorem 2. HorizontalConflict?[ B ^(s 1 v) holds if and only */||s+rv|| < D, where 
t = tcha [BT] ( s,v). 

This theorem states that the ownship and intruder aircraft are in horizontal 
conflict within the lookahead time interval [B, T] if and only if they are expected to 
be in horizontal loss of separation at the time of closest horizontal approach, which 
is given by the function tchar B;T |. 


4 Time of Closest Approach in a 3-Dimensional Airspace 

In the relative frame of reference, the protected zone surrounding the intruder air- 
craft is a cylinder of half- height H and radius D. A conflict between the ownship 
and intruder aircraft occurs when there is a time within the lookahead time interval 
at which the ownship is in the interior of the intruder’s protected zone. 

4.1 Conflict 

A mathematical definition of conflict is given as follows. The ownship and the 
intruder aircraft are in conflict during the time interval [B,T], where T is possibly 
infinite, if there exists a time t £ [ B , T] when vertical separation is lost, i.e, 

| (Soz + t ^oz) ($iz + tv iz ) | < H, 

and horizontal separation is lost, i.e., 

||(s 0 + tv 0 ) (a . i2/ ) - (Sj -f- t Vj) (x,y) II < A 


4 




Figure 1. Time (r) of closest Euclidean approach in a 3-dimensional airspace 


where s 0 ,v 0 ,Sj, and v* are all in R 3 . As in the case of horizontal conflict in For- 
mula (1), the predicate that characterizes conflict is defined on the relative vectors 
s = s 0 — s i and v = v 0 — v*. 


Conflict?^ s, v) = 3 1 £ [B, T] : \s z + t v z \ < H and 

1 1 ® (a;, j/) T ^ ~V(x,y) II ^ ^ • 


( 4 ) 


4.2 Euclidean Distance 

Identically to the construction in Section 3.2, the time min(T, nrax(.B, — jSp)), 
when v / 0, minimizes the 3-dimensional Euclidean distance between the aircraft 
during the time interval [B,T], where s and v are in R 3 . If the protected zone 
around an aircraft were a sphere instead of a cylinder, this formula would suffice 
as the definition of the time of closest approach. However, since the protected zone 
is a cylinder, this definition does not properly characterizes 3-dinrensional conflicts. 
Indeed, it does not satisfy the property that the aircraft are in conflict during the 
time interval [B, T] if and only if they are in loss of separation at this time. 

If the dimensions of D and H were comparable, the minimal 3-dinrensional 
Euclidean distance could be an indicator of the time of closest approach. However, 
the typical protected zone, i.e. where D = 5 nautical miles and H = 1000 feet, 
is 30 times wider than it is high. Figure 1 provides a side view of the protected 
zone on the X, Z-plane where the axes have the same scale. In Figure 1, assume 
that v y = 0 and that r is the time of minimum Euclidean distance for the relative 
position s = s Q — s; and relative velocity vector v = v Q — Vj. This figure illustrates 
that although the aircraft are in conflict, they are not in loss of separation at time r. 

Hence, an appropriate definition of the 3-dinrensional time of closest approach 
between two aircraft, which are surrounded by cylindrical protected zones, cannot 
be defined on terms of the minimum Euclidean distance between the aircraft. 
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4.3 Cylindrical Norm 

An alternative notion of aircraft distance, which is based on cylindrical norms, is 
proposed in [3]. Given a cylinder of radius D and half-height H, the cylindrical 
norm of a vector w G M 3 , with respect to D and H, is the quantity 


w 


cy l = max 


\u>z I 

H 


w 


(x,y) ' 

D 


( 5 ) 


With this norm, M 3 is a metric space in the sense of real analysis [7]. That is, 
the cylindrical norm satisfies the following properties for any vectors w and u in K 3 . 

• Positivity: |w|| cy i > 0. 

• Nullity: ||w|| cy i = 0 if and only if w = 0 

• Scalability: ||few|| cy i = \k\ ||w|| cy i for any fceM 

• Triangle Inequality: ||w + u|| cy i < ||w|| cy i + ||u|| cy i 

The cylindrical distance between the vectors w and u is defined as the cylindrical 
norm |jw — u 1 1 cy i . 

The following lemma and theorem, which are proven in PVS, follow directly from 
Equation (4) and Equation (5). 

Lemma 3. The ownship and the intruder aircraft are in loss of separation if and 
only if ||s c - Si\\ cy i < 1. 

Theorem 4. Let s = s Q — s i and v = v c — v,; be in M 3 , Conflict? B T (s, v) holds if 
and only if there exists t G [B,T] such that ||s + f v|| C2/ ; < 1. 


4.4 Time of Closest Approach 

Using the cylindrical norm, this section generalizes the construction in Section 3.2 
to define the time of closest approach for a three dimensional airspace, where the 
protected zone is a cylinder. 

Definition 2. The time of closest approach between the ownship and the intruder 
aircraft., for a lookahead time interval [B,T\, where T is possibly infinite, is the 
minimum time r in the interval [B, T] that satisfies 

Vf G [B, T] : || s + tv\\ cy i > ||s + Tv|| C j,/, (6) 

where s = s 0 — s,; and v = v Q — Vj . 

As in the case of Definition 1, the fact that there exists a time r that satisfies 
Formula (6) is not obvious. The rest of this section provides an algorithmic definition 
of the time of closest approach and the proof that it satisfies Definition 2. 

The time of closest horizontal approach is constructed by finding the minimum 
time in a time interval that minimizes the 2-dinrensional Euclidean norm. This 
idea can be generalized to define the time of closest approach in a 3-dinrensional 
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airspace by finding the minimum time in [B,T] that minimizes the cylindrical norm 
II s + i v ||cyi- It suffices to minimize the square ||s + t v||^ yl of this norm. This square 
can be written as the maximum of two quadratic polynomials as follows. 


|s + t v 1 1 cyl = max 


( s z + tv z ) 2 \\ s (x,y) + tv (x,y)\ 


H 2 


D 2 


= max 


(jp ( V z t 2 + ( 2 S z V z )t + S 2 z ), 

jyi ( II ^(x,y) II t + (2 S(x t y) ' v (x,y)) t T 



( 7 ) 


It can be proved that the minimum of the function rna x(p(t) , q(t)) , where t ranges 
over the interval [B,T] and p and q are two quadratic polynomials of the form 
p(t) = at 2 + bt + c and q(t) = et 2 + f t + g, is reached at a point t that satisfies 
one of the following conditions. 


• r = B, or 


• t = T and T ^ oo, or 

• r is equal to either — ^ or — ^ , or 

• r is such that p(r) = q(r). If p and q are not equal and s/e, then there 

are at most two solutions to the equation p(t) = q(t). If this equation has a 
solution, then the discriminant of the polynomial (a — e) t 2 + (b — f) t + (c — g ) 
must be nonnegative. This discriminant is given by (b — f) 2 — 4 (a — e)(c — g). 
Alternatively, if a = e and b ^ f, then there is exactly one solution to the 
equation p(t) = q(t), namely In both cases, it is easy to see that there 

are only finitely many possibilities for r. 


Applying this reasoning to the maximum in Equation (7), there are at most 
six possibilities for the time r. The first four possible times are B, T, — ^ , and 

_ s (py) . The other two possibilites are the solutions to the equation 

II V (=C,J/) II 

^2 ( V z t2 + ( 2 v z) t + s l) = Jyi (IK*,,,) ft 2 + (2 S (a . )V) ' V (a . )y) ) t + \\s {Xty) || 2 ). (8) 
Equation (8) can be rewritten as 


At 2 + Bt + C = 0, 


where 


A = _ H v (^,y)lr 

H 2 D 2 ’ 

„ 2 S z V z 2 S (x,y) ' v (a;,y) 

i f 1 W 2 

_ s z ll S (a:,y)l | 2 

H 2 D 2 ' 


(9) 


(10) 

( 11 ) 

(12) 
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Equation (9) has a solutions for t precisely when the discriminant B 2 — 4 A C is 
nonnegative. In this case, there are two possible solutions, which are equal if this 
discriminant is zero, and these solutions are given by the quadratic formula. This 
motivates the following definition of the function tcar#^. 



endf or; 

elsif A = 0 and B ^ 0 then 

T: = Tu H} ; 

endif ; 
r-=B ; 
for t 6 T do 

if t> B and ||s + t v|| cy i < ||s + r v 1 1 cy j then 
r := t] 

endif; 
endf or; 

return min(r, T ) ; 

It has been proved in PVS that the time tcar^ j’ds, v) satisfies Definition 2. 
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Lemma 5. For any t G [B, T ], ||s + tv\\ cy i > ||s + Tv\\ cy i, where r = tca[ BT ^( s, v). 

The proof of Lemma 5 uses the fact that the quantity ||s + t v|| cy i is a convex 
function of t, which can be proved using basic algebra. From that lemma, the next 
theorem follows immediatly. 

Theorem 6. Conflict?^ s,v) holds if and only if + tv z \ < H and ||s( X)3/ ) + 
TV (x, y )\\ < D, where r = tca [B}T] (s, v). 

Theorem 6 states that tca^ B ^ properly characterizes 3-dinrensional conflicts, 
i.e. , the ownship and the intruder are in conflict during the time interval [B,T] if 
and only if they are expected to be in loss of separation at time tcar S7 r(s, v). 

5 Conclusion 

Mathematical and algorithmic definitions of time of closest approach have been pre- 
sented for two and three-dimensional airspace geometries. Although the definition 
of time of closest horizontal approach is well-known (see for example [4]), the fact 
that this definition characterizes horizontal conflicts appears to be a novel approach 
to this subject. The major contribution of this paper is the definition of time of clos- 
est approach for a three-dimensional airspace and the formal proof of its properties. 
The definition of this time is based on the notion of cylindrical distance, originally 
proposed in [3]. 

Since the typical protected zone is very flat, researchers in state-based separation 
assurance systems usually define the time of closest approach in the horizontal plane. 
This is the approach followed for example by [4], where a 3-dinrensional conflict 
detection and resolution algorithm is proposed. In the case of conflicting aircraft, 
special care has to be taken when the time of closest horizontal approach does not 
lie in the interval of conflict. 

The cylindrical distance at time of closest separation can be used as a measure 
of threat severity in a 3-dinrensional airspace. Indeed, this non-dinrensional value is 
less than 1 in the case of a conflict. The closer this value is to 1, the closer the relative 
trajectory is to the envelope of the protected zone. A similar non-dinrensional value e 
is proposed in [2] and used in [1] as a measure of conflict risk. This value e represents 
the ellipse distance of an ellipsoid enclosed within the cylindrical separation zone. 

Neither the time of closest horizontal approach nor the value e characterize three- 
dimensional conflicts as tca[ B ^ does. It is believed that the proposed time of closest 
separation allows for simpler separation assurance algorithms and yields a notion 
of distance in a 3-dinrensional airspace that is more appropriate for a cylindrical 
protected zone. Indeed, this notion is at the base of the formally verified conflict 
prevention algorithm presented in [5]. 
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approach. For instance, conflicting aircraft are not necessarily in loss of separation at the time of closest three-dimensional 
Euclidean distance. This paper proposes a definition of time of closest approach that characterizes conflicts in a 
three-dimensional airspace. The proposed time is defined as the time that minimizes a distance metric called cylindrical 
norm. An algorithm that computes the time of closest approach between two aircraft is provided and the formal verification 
of its main properties is reported. 
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